Skip to content
#

pip-security

Star

Here are 4 public repositories matching this topic...

Language: All
Filter by language
All 4 Python 1 Shell 1 TypeScript 1

thebasedcapital / pfw

Star 1

Package Firewall — self-hosted supply chain security for macOS. Intercepts npm/pip/cargo/yarn in ALL shells including AI agents. 4 vuln sources (OSV + GHSA + deps.dev + CISA KEV). Zero telemetry.

macos security package-manager firewall self-hosted cve osv sca devsecops vulnerability-scanner malware-detection lulu dependency-security supply-chain-security ai-agent-security npm-security zero-telemetry supply-chain-attack pip-security cargo-security
  • Updated Apr 1, 2026
  • TypeScript

cbrkrtek / supply-chain-dependency-confusion

Star 0

Local, fully self-contained demo of a dependency confusion attack using Nexus Repository OSS — showing how group repositories merge public and internal package sources by version, and two layers of defense (client-side scope routing + server-side Routing Rules) that close the gap.

appsec package-management nexus-repository devsecops security-research supply-chain-security dependency-confusion ci-cd-security npm-security pip-security
  • Updated Sep 26, 2026
  • Shell

Add this topic to your repo

To associate your repository with the pip-security topic, visit your repo's landing page and select "manage topics."

Learn more